Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/cassanof/pantegana
A nearly undetectable reverse HTTPS Botnet+RAT C2 Handler and Client written in Go
https://github.com/cassanof/pantegana
botnet botnets golang https rat reverse-shell shell
Last synced: about 2 months ago
JSON representation
A nearly undetectable reverse HTTPS Botnet+RAT C2 Handler and Client written in Go
- Host: GitHub
- URL: https://github.com/cassanof/pantegana
- Owner: cassanof
- License: other
- Created: 2021-06-15T11:42:48.000Z (over 3 years ago)
- Default Branch: master
- Last Pushed: 2024-01-13T22:43:47.000Z (about 1 year ago)
- Last Synced: 2024-06-20T12:02:35.422Z (7 months ago)
- Topics: botnet, botnets, golang, https, rat, reverse-shell, shell
- Language: Go
- Homepage:
- Size: 75.2 KB
- Stars: 94
- Watchers: 6
- Forks: 18
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Pantegana - A Botnet RAT Made With Go
### FOR EDUCATIONAL AND RESEARCH USE ONLY
Usage of Pantegana for attacking targets without prior mutual consent is illegal. Developers assume no liability and are not responsible for any misuse or damage cause by this program.
```
___ _
/ _ \__ _ _ __ | |_ ___ __ _ __ _ _ __ __ _
/ /_)/ _` | '_ \| __/ _ \/ _` |/ _` | '_ \ / _` |
/ ___/ (_| | | | | || __/ (_| | (_| | | | | (_| |
\/ \__,_|_| |_|\__\___|\__, |\__,_|_| |_|\__,_|
|___/
```
## Features:
- Pretty and clean interactive shell (using grumble)
- Cross-platform payload client (Windows, Linux, OSX)
- HTTPS covert channel for communications
- Undetected by AVs (behavioral AVs might detect it if its not running on port 443)
- Direct command execution (not using bash or sh)
- Multiple sessions handling
- File Upload/Download
- System fingerprinting
- Gracefully closing sessions server-side on client-side crash
## TODO:
- Full Windows and OSX integration (currently it's partial)
- bash/cmd/psh shell dropping
- TOR routing?
- Implement Twitter-Transfer-Protocol (ttp)
## Building:
**Requires Go 1.16 and up**
*To build the program you will also need `openssl`.*
By default the client is set to dial `127.0.0.1:1337`.
To change that, you can edit the config object in to your liking (`./main/client/main.go`)
When running `make` you will need to specify any external IP or domain to include in the SSL certificate.
This ip would be the public ip of the C2 server where the pantegana `server` binary would run.
If you don't know the public ip of your server: run `curl ip.me`, and you will be prompted with the ip.
***This is done to prevent people stealing your binary and using it with malicious intent.***
Example: `make IP=1.1.1.1 DOMAIN=example.com`.
By default the Makefile sets `IP=127.0.0.1` and `DOMAIN=localhost`. If you want to keep that you can just omit the variables in the make command.
Example: `make`
You will find your client and server builds in the `out` directory.
Check Makefile for additional build/running options
## Obfuscation of the client
There is a build option that allows the client to be obfuscated to reduce detection.
In order to do that, you will need to install `garble` with: `go install mvdan.cc/garble@latest`
and run the `make build-client-nix-garble` option.